https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-26T23:08:10.582013+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111957 fkie_cve-2026-111957 2026-10-26T23:08:10.600042+00:00

The SUMIT Payment Gateway for WooCommerce WordPress plugin before 4.0.0 does not bind the payment it confirms with the provider to the order being completed, nor check the payment amount against the order total, allowing unauthenticated users to mark a pending order as paid by replaying a payment identifier obtained from any single genuine payment.

 https://db.gcve.eu/vuln/ghsa-r6r9-jfqh-hrq2 GHSA-r6r9-jfqh-hrq2 2026-10-26T23:08:10.600160+00:00

The SUMIT Payment Gateway for WooCommerce WordPress plugin before 4.0.0 does not bind the payment it confirms with the provider to the order being completed, nor check the payment amount against the order total, allowing unauthenticated users to mark a pending order as paid by replaying a payment identifier obtained from any single genuine payment.